CVE-2019-6293 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-6293 Interim 1 48 2026-03-05T06:25:58Z current 2021-05-30T14:24:04Z 2026-03-05T06:25:58Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-6293 An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_normal function making recursive calls to itself in certain scenarios involving lots of '*' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES for SAP Applications 11 SP3 SUSE CaaS Platform 4.5 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Proxy 4.3 SUSE Manager Proxy LTS 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.3 SUSE Manager Retail Branch Server LTS 4.3 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.3 SUSE Manager Server LTS 4.3 openSUSE Leap 15.5 openSUSE Leap 15.6 flex flex-32bit flex-x86 libfl-devel libfl-devel-32bit libfl2 libfl2-32bit flex as a component of SLES for SAP Applications 11 SP3 flex as a component of SUSE CaaS Platform 4.5 flex as a component of SUSE Enterprise Storage 7 flex as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 flex as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 flex as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libfl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libfl2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS flex as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libfl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libfl2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS flex as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libfl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libfl2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS flex as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libfl2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS flex as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libfl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libfl2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS flex as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libfl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libfl2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS flex as a component of SUSE Linux Enterprise Module for Basesystem 15 libfl-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 libfl2 as a component of SUSE Linux Enterprise Module for Basesystem 15 flex as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libfl-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libfl2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 flex as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libfl-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libfl2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 flex as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libfl-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libfl2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 flex as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libfl-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libfl2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 flex as a component of SUSE Linux Enterprise Real Time 15 SP2 libfl-devel as a component of SUSE Linux Enterprise Real Time 15 SP2 libfl2 as a component of SUSE Linux Enterprise Real Time 15 SP2 flex as a component of SUSE Linux Enterprise Server 11 SP1 flex as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata flex as a component of SUSE Linux Enterprise Server 11 SP3 flex-32bit as a component of SUSE Linux Enterprise Server 11 SP3 flex-x86 as a component of SUSE Linux Enterprise Server 11 SP3 flex as a component of SUSE Linux Enterprise Server 11 SP3 LTSS flex as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata flex as a component of SUSE Linux Enterprise Server 11 SP4 LTSS flex as a component of SUSE Linux Enterprise Server 11 SP4-LTSS flex-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS flex as a component of SUSE Linux Enterprise Server 12 SP1-LTSS flex-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libfl-devel as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libfl-devel-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libfl2 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libfl2-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS flex as a component of SUSE Linux Enterprise Server 12 SP2-BCL flex-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL libfl-devel as a component of SUSE Linux Enterprise Server 12 SP2-BCL libfl-devel-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL libfl2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libfl2-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL flex as a component of SUSE Linux Enterprise Server 12 SP2-LTSS flex-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libfl-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libfl-devel-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libfl2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libfl2-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS flex as a component of SUSE Linux Enterprise Server 12 SP3 flex-32bit as a component of SUSE Linux Enterprise Server 12 SP3 flex as a component of SUSE Linux Enterprise Server 12 SP3-BCL flex-32bit as a component of SUSE Linux Enterprise Server 12 SP3-BCL libfl-devel as a component of SUSE Linux Enterprise Server 12 SP3-BCL libfl-devel-32bit as a component of SUSE Linux Enterprise Server 12 SP3-BCL libfl2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libfl2-32bit as a component of SUSE Linux Enterprise Server 12 SP3-BCL flex as a component of SUSE Linux Enterprise Server 12 SP4 flex-32bit as a component of SUSE Linux Enterprise Server 12 SP4 libfl-devel as a component of SUSE Linux Enterprise Server 12 SP4 libfl-devel-32bit as a component of SUSE Linux Enterprise Server 12 SP4 libfl2 as a component of SUSE Linux Enterprise Server 12 SP4 libfl2-32bit as a component of SUSE Linux Enterprise Server 12 SP4 flex as a component of SUSE Linux Enterprise Server 12 SP4-LTSS flex-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libfl-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libfl-devel-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libfl2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libfl2-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS flex as a component of SUSE Linux Enterprise Server 12 SP5 flex-32bit as a component of SUSE Linux Enterprise Server 12 SP5 libfl-devel as a component of SUSE Linux Enterprise Server 12 SP5 libfl-devel-32bit as a component of SUSE Linux Enterprise Server 12 SP5 libfl2 as a component of SUSE Linux Enterprise Server 12 SP5 libfl2-32bit as a component of SUSE Linux Enterprise Server 12 SP5 flex as a component of SUSE Linux Enterprise Server 12 SP5-LTSS flex-32bit as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libfl-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libfl-devel-32bit as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libfl2 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libfl2-32bit as a component of SUSE Linux Enterprise Server 12 SP5-LTSS flex as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security flex as a component of SUSE Linux Enterprise Server 12-LTSS flex-32bit as a component of SUSE Linux Enterprise Server 12-LTSS flex as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libfl-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libfl2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flex as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libfl-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libfl2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS flex as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfl-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libfl2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS flex as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libfl-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libfl2 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS flex as a component of SUSE Linux Enterprise Server 15 SP6-LTSS libfl-devel as a component of SUSE Linux Enterprise Server 15 SP6-LTSS libfl2 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS flex as a component of SUSE Linux Enterprise Server 15-LTSS libfl-devel as a component of SUSE Linux Enterprise Server 15-LTSS libfl2 as a component of SUSE Linux Enterprise Server 15-LTSS flex as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 flex as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 flex as a component of SUSE Linux Enterprise Server Teradata 12 SP3 flex as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS flex as a component of SUSE Linux Enterprise Server Teradata 15 SP4 flex as a component of SUSE Linux Enterprise Server for SAP Applications 12 flex as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 flex-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libfl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libfl-devel-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libfl2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libfl2-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 flex as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 flex-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libfl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libfl-devel-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libfl2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libfl2-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 flex as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 flex-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libfl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libfl-devel-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libfl2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libfl2-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 flex as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 flex as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libfl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libfl2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 flex as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libfl2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 flex as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libfl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libfl2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 flex as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libfl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libfl2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 flex as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 libfl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 libfl2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 flex as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 flex-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 flex as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 flex as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libfl-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libfl2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 flex as a component of SUSE Manager Proxy 4.1 flex as a component of SUSE Manager Proxy 4.3 libfl-devel as a component of SUSE Manager Proxy 4.3 libfl2 as a component of SUSE Manager Proxy 4.3 flex as a component of SUSE Manager Proxy LTS 4.3 libfl-devel as a component of SUSE Manager Proxy LTS 4.3 libfl2 as a component of SUSE Manager Proxy LTS 4.3 flex as a component of SUSE Manager Retail Branch Server 4.1 flex as a component of SUSE Manager Retail Branch Server 4.3 libfl-devel as a component of SUSE Manager Retail Branch Server 4.3 libfl2 as a component of SUSE Manager Retail Branch Server 4.3 flex as a component of SUSE Manager Retail Branch Server LTS 4.3 libfl-devel as a component of SUSE Manager Retail Branch Server LTS 4.3 libfl2 as a component of SUSE Manager Retail Branch Server LTS 4.3 flex as a component of SUSE Manager Server 4.1 flex as a component of SUSE Manager Server 4.3 libfl-devel as a component of SUSE Manager Server 4.3 libfl2 as a component of SUSE Manager Server 4.3 flex as a component of SUSE Manager Server LTS 4.3 libfl-devel as a component of SUSE Manager Server LTS 4.3 libfl2 as a component of SUSE Manager Server LTS 4.3 flex as a component of openSUSE Leap 15.5 libfl-devel as a component of openSUSE Leap 15.5 libfl-devel-32bit as a component of openSUSE Leap 15.5 libfl2 as a component of openSUSE Leap 15.5 libfl2-32bit as a component of openSUSE Leap 15.5 flex as a component of openSUSE Leap 15.6 libfl-devel as a component of openSUSE Leap 15.6 libfl-devel-32bit as a component of openSUSE Leap 15.6 libfl2 as a component of openSUSE Leap 15.6 libfl2-32bit as a component of openSUSE Leap 15.6 An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_normal function making recursive calls to itself in certain scenarios involving lots of '*' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service. CVE-2019-6293 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L